VAPT Analyst

Job Title: VAPT Analyst
Location: Bengaluru
Department: Cybersecurity – Offensive Security
Experience: 1-2 years
Employment Type: Full-time
About Us:
AuthenticOne is a CERT-In empanelled and CREST Accredited Cybersecurity solutions and
services company with expertise in consulting, advisory, and risk management.
AuthenticOne specializes in Comprehensive Compliance Management, Vulnerability
Assessment, Penetration Testing, and Managed Security Services. Our expert team
ensures that clients' businesses meet all regulatory requirements, identify and mitigate
potential vulnerabilities, and maintain robust, continuous protection against evolving
cyber threats.
Position Summary:
The VAPT Analyst will be responsible for conducting Vulnerability Assessment and
Penetration Testing (VAPT) engagements across web applications, mobile applications,
APIs, networks, cloud environments, and enterprise infrastructure. The role requires a
strong understanding of offensive security methodologies, vulnerability identification,
exploitation techniques, and security best practices. The ideal candidate is passionate
about ethical hacking, cybersecurity research, and helping organizations strengthen their
security posture.
Key Responsibilities:
Perform Vulnerability Assessment and Penetration Testing (VAPT) activities for web applications, mobile applications, APIs, networks, wireless infrastructure, and cloud environments.
Identify, validate, and exploit security vulnerabilities using manual and automated testing methodologies.
Conduct authenticated and unauthenticated security assessments following
industry-standard frameworks and testing methodologies.
Analyze security findings, assess business impact, and provide remediation recommendations.
Prepare comprehensive technical and executive-level assessment reports.
Support Red Team, Purple Team, and adversary simulation exercises as required.
Stay updated on emerging threats, attack techniques, vulnerabilities, and industry best practices.
Contribute to internal research, tool development, automation initiatives, and knowledge-sharing activities.
Qualifications:
1–2 years of hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT), Application Security, or Offensive Security.
Knowledge of network security concepts, common attack vectors, exploitation techniques and the OWASP Top 10
Hands-on experience with security testing tools such as Burp Suite, Nmap, Nessus, OpenVAS, Nikto, Metasploit, SQLMap, Wireshark, and similar tools.
Understanding of authentication mechanisms, session management, access control vulnerabilities, and API security.
Familiarity with Linux and Windows operating systems from a security testing
perspective.
Experience with scripting or automation using Python, Bash, PowerShell, or similar languages is an added advantage.
Knowledge of cloud security fundamentals across AWS, Azure, or Google Cloud
Platform.
Strong analytical, troubleshooting, and problem-solving skills.
Excellent report writing and communication skills.
Ability to explain technical vulnerabilities and remediation recommendations to both technical and non-technical stakeholders.
Educational Qualifications:
Bachelor's degree in computer science, Information Security, Information Technology, Cybersecurity, or a related field (or equivalent practical experience).
One or more industry certifications such as eJPT, PNPT, CEH, Security+, eWPT,
OSCP etc.
Why Join Us
Be part of a young, passionate cybersecurity company making a real impact.
Work on diverse cybersecurity engagements across industries and technologies.
Gain exposure to advanced security testing methodologies, compliance frameworks, and real-world attack scenarios.
Collaborate with experienced cybersecurity consultants and security researchers.
Growth-oriented culture built on Trust, Transparency, and Teamwork.
To Apply:
Directly apply through LinkedIn EasyApply Options.

Work arrangement
No